Apple macOS 14 Sonoma is a general-purpose operating system that supports a computing environment for multiple users, applications, and includes Bluetooth and Wi-fi client functionality.
The macOS 14 Sonoma software is a Unix-based graphical operating system. The macOS core is a POSIX compliant operating system built on top of the XNU kernel with standard Unix facilities available from the command line interface.
The TOE is in the evaluated configuration when it is configured according to Apple macOS 14 Sonoma Common Criteria Guide and running on a hardware platform listed in the following table.
\r\nHardware Platforms – Apple Silicon
\r\n| \r\n Marketing Name \r\n | \r\n\r\n Model \r\n | \r\n\r\n Model Identifier \r\n | \r\n\r\n Processor | \r\n\r\n Security Chip \r\n | \r\n\r\n BT Version | \r\n
| \r\n 2023 \r\n | \r\n|||||
| \r\n MacBook Pro (16-inch, 2023) \r\n | \r\n\r\n A2780 \r\n | \r\n\r\n Mac14,6 \r\n | \r\n\r\n M2 Max (ARMv8.6-A) \r\n | \r\n\r\n \r\n SEP v2.0 \r\n | \r\n\r\n 5.3 (4388) \r\n | \r\n
| \r\n Mac14,10 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n||||
| \r\n MacBook Pro (14-inch, 2023) \r\n | \r\n\r\n A2779 \r\n | \r\n\r\n Mac14,5 \r\n | \r\n\r\n M2 Max (ARMv8.6-A) \r\n | \r\n\r\n \r\n SEP v2.0 \r\n | \r\n\r\n 5.3 (4388) \r\n | \r\n
| \r\n Mac14,9 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n||||
| \r\n Mac mini (M2 Pro, 2023) \r\n | \r\n\r\n A2816 \r\n | \r\n\r\n Mac14,12 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 (4388) \r\n | \r\n
| \r\n Mac mini (M2, 2023) \r\n | \r\n\r\n A2686 \r\n | \r\n\r\n Mac14,3 \r\n | \r\n\r\n M2 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 (4388) \r\n | \r\n
| \r\n 2022 \r\n | \r\n|||||
| \r\n MacBook Pro (13-inch, M2, 2022) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n Mac14,7 \r\n | \r\n\r\n M2 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4378) \r\n | \r\n
| \r\n MacBook Air (M2, 2022) \r\n | \r\n\r\n A2861 \r\n | \r\n\r\n Mac14,2 \r\n | \r\n\r\n M2 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4387) \r\n | \r\n
| \r\n Mac Studio (2022) \r\n | \r\n\r\n A2615 \r\n | \r\n\r\n Mac13,2 \r\n | \r\n\r\n M1 Ultra (ARMv8.5-A) \r\n | \r\n\r\n \r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4387) \r\n | \r\n
| \r\n Mac13,1 \r\n | \r\n\r\n M1 Max (ARMv8.5-A) \r\n | \r\n||||
| \r\n 2021 \r\n | \r\n|||||
| \r\n MacBook Pro (16-inch, 2021) \r\n | \r\n\r\n A2485 \r\n | \r\n\r\n MacBookPro18,2 \r\n | \r\n\r\n M1 Max (ARMv8.5-A) \r\n | \r\n\r\n \r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4387) \r\n | \r\n
| \r\n MacBookPro18,1 \r\n | \r\n\r\n M1 Pro (ARMv8.5-A) \r\n | \r\n||||
| \r\n MacBook Pro (14-inch, 2021) \r\n | \r\n\r\n A2442 \r\n | \r\n\r\n MacBookPro18,4 \r\n | \r\n\r\n M1 Max (ARMv8.5-A) \r\n | \r\n\r\n \r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4387) \r\n | \r\n
| \r\n MacBookPro18,3 \r\n | \r\n\r\n M1 Pro (ARMv8.5-A) \r\n | \r\n||||
| \r\n iMac (24-inch, M1, 2021) \r\n | \r\n\r\n A2438 \r\n | \r\n\r\n iMac21,1 \r\n | \r\n\r\n M1 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4378) \r\n | \r\n
| \r\n A2439 \r\n | \r\n\r\n iMac21,2 \r\n | \r\n||||
| \r\n 2020 \r\n | \r\n|||||
| \r\n Mac mini (M1, 2020) \r\n | \r\n\r\n A2348 \r\n | \r\n\r\n Macmini9,1 \r\n | \r\n\r\n M1 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4378) \r\n | \r\n
| \r\n MacBook Air (M1, 2020) \r\n | \r\n\r\n A2337 \r\n | \r\n\r\n MacBookAir10,1 \r\n | \r\n\r\n M1 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4378) \r\n | \r\n
| \r\n MacBook Pro (13-inch, M1, 2020) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n MacBookPro17,1 \r\n | \r\n\r\n M1 | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 (4378) \r\n | \r\n
The TOE operates with the following components in the operational environment:
\r\nTOE Operational Environment
\r\n| \r\n Component \r\n | \r\n\r\n Description \r\n | \r\n
| \r\n Hardware platform \r\n | \r\n\r\n See the Hardware Platforms – Apple Silicon table above \r\n | \r\n
| \r\n Apple Update Server \r\n | \r\n\r\n Server that allows the TOE to download updates \r\n | \r\n
| \r\n Smart Card, | \r\n\r\n An encrypted card that allows the TOE to authenticate a user when used with smart card reader devices. \r\n | \r\n
| \r\n NTP Server \r\n | \r\n\r\n Server that allows the TOE to synchronise its time \r\n | \r\n
| \r\n Wireless Access Point \r\n | \r\n\r\n Access point for the TOE to connect to for WLAN connectivity capable of mediating 802.1X authentication. \r\n | \r\n
| \r\n RADIUS server \r\n | \r\n\r\n A RADIUS server capable of providing 802.1X services. \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which Apple macOS 14 Sonoma was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Rev. 5. The product, when configured as identified in the Apple macOS 14 Sonoma Common Criteria Guide, satisfies all of the security functional requirements stated in the Apple macOS 14 Sonoma Security Target. The project underwent CCEVS Validator review. The evaluation was completed in December 2025. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"The following are expected use cases for the TOE per their respective Protection Profiles:
\r\nThe TOE provides the following security functions:
\r\nAudit Data Generation
\r\nThe TOE generates audit events for all start-up and shut-down functions, and all auditable events as specified by the conformance claims required by the PP and Modules. Audit events are generated for the following audit functions:
\r\nEach audit record contains the date and time of the event, type of event, subject identity (if applicable), and outcome (success or failure) of the event.
\r\nUser Data Protection
\r\nThe TOE implements access controls that prevent unprivileged users from accessing files and directories owned by other users.
\r\nIdentification and Authentication
\r\nAll users must be authenticated to the TOE prior to carrying out any management actions. The TOE supports:
\r\nThe TOE will lock out user accounts after a defined number of unsuccessful authentication attempts have been met. The TOE supports Bluetooth Secure Simple Pairing (SSP). It requires user authorization and mutual authentication during pairing. It also discards pairing attempts and session initialization from Bluetooth devices to which an active session pre-exists. The TOE requires explicit user authorization when pairing with an untrusted device.
\r\nThe TOE also supports the use of X.509 certificates for the purpose of identifying itself and/or its users for TLS connections as well as for connecting to Wi-Fi networks using EAP-TLS.
\r\nSecurity Management
\r\nThe TOE can perform management functions. The administrator has full access to carry out all management functions; whereas the user will have limited privileges.
\r\nProtection of the TSF
\r\nThe TOE implements the following protection of TSF data functions:
\r\nTrusted Path/Channels
\r\nThe TOE supports TLS v1.2 for trusted channel communications. The TOE uses TLS to securely communicate with the Apple Update Server. The TOE enforces encryption when transmitting data over Bluetooth for both BR/EDR and LE and terminates the connection if the connected device stops encrypting. The TOE enforces 802.1X EAP-TLS authentication to wireless access points and protects wireless traffic using encryption when connecting via the wireless LAN client.
\r\nTOE Access
\r\nBefore establishing a user session, the TOE will display an advisory warning message regarding unauthorized use of the OS.
\r\nCryptographic Support
\r\nThe TOE includes the Apple corecrypto v14.0 cryptographic libraries and is supported by the onboard Apple SEP Hardware for performing user space, kernel space, and SEP cryptographic operations. In addition, it uses a software and hardware noise source for entropy generation. The TOE implements TLS 1.2 for secure communications with remote servers. The Bluetooth hardware implements the AES-CCM-128 cryptographic functionality used when connecting to Bluetooth devices. The TOE implements WPA3 to secure 802.11 wireless traffic protected using AES-GCMP-256 cryptographic algorithms.
","features":[{"id":3748,"feature_name":"Asymmetric Key Generation"},{"id":3714,"feature_name":"Auditing"},{"id":3726,"feature_name":"Bluetooth"},{"id":3754,"feature_name":"Certificate Authentication"},{"id":3753,"feature_name":"Certificate Validation"},{"id":3750,"feature_name":"Cryptograhic Hashing"},{"id":3749,"feature_name":"Cryptographic Key Establishment"},{"id":3755,"feature_name":"Cryptographic Signature Generation"},{"id":3756,"feature_name":"Cryptographic Signature Verification"},{"id":3751,"feature_name":"DRBG"},{"id":3743,"feature_name":"EAP-TLS"},{"id":3715,"feature_name":"Key Destruction"},{"id":3752,"feature_name":"Keyed-hash message authentication"},{"id":3747,"feature_name":"Operating System"},{"id":3731,"feature_name":"TLS 1.2"},{"id":3741,"feature_name":"TLS Client"},{"id":3744,"feature_name":"Wi-Fi 6"},{"id":3742,"feature_name":"WLAN Client"},{"id":3746,"feature_name":"WPA3"}]}